$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/3905e242-41f7-346c-95b8-b9f9059f425b.roa File: 3905e242-41f7-346c-95b8-b9f9059f425b.roa (raw, json) Hash identifier: LbTWABErcMTVUzQNYN9Zn3lucFGkpndF1NYllEMe39w= Subject key identifier: 6A:D4:93:D1:CB:FD:C5:25:39:0D:72:26:1C:F3:7C:27:E6:8E:EB:08 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F43285848A29B536916769CBEF09DC940 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/3905e242-41f7-346c-95b8-b9f9059f425b.roa Signing time: Thu 23 Jan 2025 02:00:40 +0000 ROA not before: Thu 23 Jan 2025 02:00:40 +0000 ROA not after: Wed 23 Apr 2025 01:00:40 +0000 asID: 398823 IP address blocks: 107.148.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:9b:53:69:16:76:9c:be:f0:9d:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Jan 23 02:00:40 2025 GMT Not After : Apr 23 01:00:40 2025 GMT Subject: CN=79dd6e5e-c1d9-4c3d-86ee-3403259518f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a5:71:3e:c7:69:8d:0c:21:c2:00:b6:42:ae: 34:53:b1:70:da:ea:1e:57:b6:5b:6f:84:65:2b:30: ef:c6:ee:64:52:ba:0f:bd:70:c9:42:d3:b1:d2:64: 80:28:09:36:90:2a:37:67:13:f1:7e:1a:99:3f:04: cc:06:a2:9a:69:8f:01:2b:1f:ff:15:cc:6b:33:f4: 92:0f:02:fd:3c:5b:6a:0e:d5:36:61:9e:9c:db:29: e0:11:80:37:69:92:67:a9:02:53:c3:b4:58:4b:03: a2:03:d3:76:de:23:30:a2:f5:0d:ab:64:ca:a8:dc: 30:13:9b:84:7f:46:b0:08:88:62:c1:2f:36:ac:4b: ee:e4:2f:1c:fa:d3:85:ab:ed:17:10:ed:c7:db:3d: 3d:aa:af:e1:f0:14:12:0e:53:57:4b:2a:a0:1d:02: a8:8d:13:c2:29:4d:2c:3d:07:dd:54:cc:22:f1:e1: 37:fe:57:e3:77:9d:f0:b5:6b:ca:35:b4:c8:3c:94: bb:4e:49:bd:cd:df:04:bb:eb:4c:ab:95:11:df:2d: 4f:67:35:55:dc:17:bc:60:ff:87:05:ac:dc:1c:f2: 61:56:c1:6f:70:8c:94:a1:27:66:35:67:ca:1e:cc: 99:5d:42:e6:5f:6e:30:da:62:3a:37:12:f8:b0:a8: 92:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D4:93:D1:CB:FD:C5:25:39:0D:72:26:1C:F3:7C:27:E6:8E:EB:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/3905e242-41f7-346c-95b8-b9f9059f425b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.148.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:a0:1d:ee:f3:1f:df:fc:a3:bf:e3:d8:ce:e9:cd:4c:f7:7c: cc:ae:00:ec:aa:d4:20:1b:d0:1b:17:ae:e6:fa:02:70:6c:73: 81:ca:61:2a:98:cc:b2:de:15:71:2c:ec:e4:8f:2f:47:a3:4f: 35:8c:6a:06:91:e1:04:f6:6f:df:a3:e5:94:68:fa:20:8a:6f: 32:c3:ed:e3:7d:f9:dc:bb:cc:13:c1:c9:97:b0:c6:01:e2:96: 6f:a9:f8:e8:4e:8e:c4:fc:cb:33:36:85:39:8d:9b:dc:f9:e5: fa:58:fe:aa:ea:a8:cf:6e:3b:20:98:0b:b7:99:55:85:1a:98: 1f:10:42:b0:64:bf:f5:63:44:4b:69:96:78:2a:3a:7d:0a:5f: 3d:0f:85:3e:7c:01:ba:0f:e7:25:0b:9b:c7:18:48:f4:6c:ad: 72:9e:89:97:04:3b:5e:a1:90:9b:c9:46:d7:be:b4:3c:97:ea: c6:0b:28:52:9e:e0:9c:83:b6:8b:43:a4:3f:b3:83:57:c5:8f: 60:0e:57:1a:c6:85:e5:86:55:4a:36:a1:69:27:87:fe:86:ed: cc:c2:09:33:da:43:c7:96:fc:79:cf:7c:16:13:8b:ee:4f:07: cd:37:dc:db:27:ef:9a:1a:91:25:9b:b5:20:79:73:06:17:6c: 71:d1:9d:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiim1NpFnacvvCdyUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk NzlkZDZlNWUtYzFkOS00YzNkLTg2ZWUtMzQwMzI1OTUxOGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qVxPsdpjQwhwgC2Qq40U7Fw2uoeV7Zbb4Rl KzDvxu5kUroPvXDJQtOx0mSAKAk2kCo3ZxPxfhqZPwTMBqKaaY8BKx//FcxrM/SS DwL9PFtqDtU2YZ6c2yngEYA3aZJnqQJTw7RYSwOiA9N23iMwovUNq2TKqNwwE5uE f0awCIhiwS82rEvu5C8c+tOFq+0XEO3H2z09qq/h8BQSDlNXSyqgHQKojRPCKU0s PQfdVMwi8eE3/lfjd53wtWvKNbTIPJS7Tkm9zd8Eu+tMq5UR3y1PZzVV3Be8YP+H BazcHPJhVsFvcIyUoSdmNWfKHsyZXULmX24w2mI6NxL4sKiSwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrUk9HL/cUlOQ1yJhzzfCfmjusIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvMzkwNWUyNDItNDFmNy0z NDZjLTk1YjgtYjlmOTA1OWY0MjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5RWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOgHe7zH9/8o7/j2M7pzUz3fMyuAOyq1CAb0BsXrub6AnBsc4HKYSqY zLLeFXEs7OSPL0ejTzWMagaR4QT2b9+j5ZRo+iCKbzLD7eN9+dy7zBPByZewxgHi lm+p+OhOjsT8yzM2hTmNm9z55fpY/qrqqM9uOyCYC7eZVYUamB8QQrBkv/VjREtp lngqOn0KXz0PhT58AboP5yULm8cYSPRsrXKeiZcEO16hkJvJRte+tDyX6sYLKFKe 4JyDtotDpD+zg1fFj2AOVxrGheWGVUo2oWknh/6G7czCCTPaQ8eW/HnPfBYTi+5P B8033Nsn75oakSWbtSB5cwYXbHHRnXM= -----END CERTIFICATE-----Generated at Fri Mar 14 08:41:18 2025 by rpki-client